整合提交

2026-06-23 18:46:45 +08:00
parent 32e35666af
commit 0b4860f46e
452 changed files with 21755 additions and 23 deletions
@@ -0,0 +1,105 @@
+
+package com.weather.modules.security.oauth2;
+
+import cn.hutool.core.util.StrUtil;
+import com.weather.common.constant.Constant;
+import com.weather.common.exception.ErrorCode;
+import com.weather.common.utils.HttpContextUtils;
+import com.weather.common.utils.JsonUtils;
+import com.weather.common.utils.Result;
+import jakarta.servlet.ServletRequest;
+import jakarta.servlet.ServletResponse;
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.servlet.http.HttpServletResponse;
+import org.apache.shiro.authc.AuthenticationException;
+import org.apache.shiro.authc.AuthenticationToken;
+import org.apache.shiro.web.filter.authc.AuthenticatingFilter;
+import org.springframework.http.HttpStatus;
+import org.springframework.web.bind.annotation.RequestMethod;
+
+import java.io.IOException;
+
+/**
+ * oauth2过滤器
+ *
+ * @author 123
+ */
+public class Oauth2Filter extends AuthenticatingFilter {
+
+    @Override
+    protected AuthenticationToken createToken(ServletRequest request, ServletResponse response) throws Exception {
+        //获取请求token
+        String token = getRequestToken((HttpServletRequest) request);
+
+        if (StrUtil.isBlank(token)) {
+            return null;
+        }
+
+        return new Oauth2Token(token);
+    }
+
+    @Override
+    protected boolean isAccessAllowed(ServletRequest request, ServletResponse response, Object mappedValue) {
+        if (((HttpServletRequest) request).getMethod().equals(RequestMethod.OPTIONS.name())) {
+            return true;
+        }
+
+        return false;
+    }
+
+    @Override
+    protected boolean onAccessDenied(ServletRequest request, ServletResponse response) throws Exception {
+        //获取请求token，如果token不存在，直接返回401
+        String token = getRequestToken((HttpServletRequest) request);
+        if (StrUtil.isBlank(token)) {
+            HttpServletResponse httpResponse = (HttpServletResponse) response;
+            httpResponse.setContentType("application/json;charset=utf-8");
+            httpResponse.setHeader("Access-Control-Allow-Credentials", "true");
+            httpResponse.setHeader("Access-Control-Allow-Origin", HttpContextUtils.getOrigin());
+
+            String json = JsonUtils.toJsonString(new Result().error(ErrorCode.UNAUTHORIZED));
+
+            httpResponse.getWriter().print(json);
+
+            return false;
+        }
+
+        return executeLogin(request, response);
+    }
+
+    @Override
+    protected boolean onLoginFailure(AuthenticationToken token, AuthenticationException e, ServletRequest request, ServletResponse response) {
+        HttpServletResponse httpResponse = (HttpServletResponse) response;
+        httpResponse.setContentType("application/json;charset=utf-8");
+        httpResponse.setHeader("Access-Control-Allow-Credentials", "true");
+        httpResponse.setHeader("Access-Control-Allow-Origin", HttpContextUtils.getOrigin());
+        try {
+            //处理登录失败的异常
+            Throwable throwable = e.getCause() == null ? e : e.getCause();
+            Result r = new Result().error(HttpStatus.UNAUTHORIZED.value(), throwable.getMessage());
+
+            String json = JsonUtils.toJsonString(r);
+            httpResponse.getWriter().print(json);
+        } catch (IOException e1) {
+
+        }
+
+        return false;
+    }
+
+    /**
+     * 获取请求的token
+     */
+    private String getRequestToken(HttpServletRequest httpRequest) {
+        //从header中获取token
+        String token = httpRequest.getHeader(Constant.TOKEN_HEADER);
+
+        //如果header中不存在token，则从参数中获取token
+        if (StrUtil.isBlank(token)) {
+            token = httpRequest.getParameter(Constant.TOKEN_HEADER);
+        }
+
+        return token;
+    }
+
+}
@@ -0,0 +1,85 @@
+
+package com.weather.modules.security.oauth2;
+
+import com.weather.common.exception.ErrorCode;
+import com.weather.common.utils.ConvertUtils;
+import com.weather.common.utils.MessageUtils;
+import com.weather.modules.security.entity.SysUserTokenEntity;
+import com.weather.modules.security.service.ShiroService;
+import com.weather.modules.security.user.UserDetail;
+import com.weather.modules.sys.entity.SysUserEntity;
+import lombok.AllArgsConstructor;
+import org.apache.shiro.authc.*;
+import org.apache.shiro.authz.AuthorizationInfo;
+import org.apache.shiro.authz.SimpleAuthorizationInfo;
+import org.apache.shiro.realm.AuthorizingRealm;
+import org.apache.shiro.subject.PrincipalCollection;
+import org.springframework.stereotype.Component;
+
+import java.util.List;
+import java.util.Set;
+
+/**
+ * 认证
+ *
+ * @author 123
+ */
+@Component
+@AllArgsConstructor
+public class Oauth2Realm extends AuthorizingRealm {
+    private final ShiroService shiroService;
+
+    @Override
+    public boolean supports(AuthenticationToken token) {
+        return token instanceof Oauth2Token;
+    }
+
+    /**
+     * 授权(验证权限时调用)
+     */
+    @Override
+    protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principals) {
+        UserDetail user = (UserDetail) principals.getPrimaryPrincipal();
+
+        //用户权限列表
+        Set<String> permsSet = shiroService.getUserPermissions(user);
+
+        SimpleAuthorizationInfo info = new SimpleAuthorizationInfo();
+        info.setStringPermissions(permsSet);
+        return info;
+    }
+
+    /**
+     * 认证(登录时调用)
+     */
+    @Override
+    protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken token) throws AuthenticationException {
+        String accessToken = (String) token.getPrincipal();
+
+        //根据accessToken，查询用户信息
+        SysUserTokenEntity tokenEntity = shiroService.getByToken(accessToken);
+        //token失效
+        if (tokenEntity == null || tokenEntity.getExpireDate().getTime() < System.currentTimeMillis()) {
+            throw new IncorrectCredentialsException(MessageUtils.getMessage(ErrorCode.TOKEN_INVALID));
+        }
+
+        //查询用户信息
+        SysUserEntity userEntity = shiroService.getUser(tokenEntity.getUserId());
+
+        //转换成UserDetail对象
+        UserDetail userDetail = ConvertUtils.sourceToTarget(userEntity, UserDetail.class);
+
+        //获取用户对应的部门数据权限
+        List<Long> deptIdList = shiroService.getDataScopeList(userDetail.getId());
+        userDetail.setDeptIdList(deptIdList);
+
+        //账号锁定
+        if (userDetail.getStatus() == 0) {
+            throw new LockedAccountException(MessageUtils.getMessage(ErrorCode.ACCOUNT_LOCK));
+        }
+
+        SimpleAuthenticationInfo info = new SimpleAuthenticationInfo(userDetail, accessToken, getName());
+        return info;
+    }
+
+}
@@ -0,0 +1,28 @@
+
+
+package com.weather.modules.security.oauth2;
+
+import org.apache.shiro.authc.AuthenticationToken;
+
+/**
+ * token
+ *
+ * @author 123
+ */
+public class Oauth2Token implements AuthenticationToken {
+    private String token;
+
+    public Oauth2Token(String token){
+        this.token = token;
+    }
+
+    @Override
+    public String getPrincipal() {
+        return token;
+    }
+
+    @Override
+    public Object getCredentials() {
+        return token;
+    }
+}
@@ -0,0 +1,46 @@
+
+
+package com.weather.modules.security.oauth2;
+
+import com.weather.common.exception.CommonException;
+
+import java.security.MessageDigest;
+import java.util.UUID;
+
+/**
+ * 生成token
+ *
+ * @author 123
+ */
+public class TokenGenerator {
+
+    public static String generateValue() {
+        return generateValue(UUID.randomUUID().toString());
+    }
+
+    private static final char[] HEX_CODE = "0123456789abcdef".toCharArray();
+
+    public static String toHexString(byte[] data) {
+        if(data == null) {
+            return null;
+        }
+        StringBuilder r = new StringBuilder(data.length*2);
+        for ( byte b : data) {
+            r.append(HEX_CODE[(b >> 4) & 0xF]);
+            r.append(HEX_CODE[(b & 0xF)]);
+        }
+        return r.toString();
+    }
+
+    public static String generateValue(String param) {
+        try {
+            MessageDigest algorithm = MessageDigest.getInstance("MD5");
+            algorithm.reset();
+            algorithm.update(param.getBytes());
+            byte[] messageDigest = algorithm.digest();
+            return toHexString(messageDigest);
+        } catch (Exception e) {
+            throw new CommonException("token invalid", e);
+        }
+    }
+}